This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer File: Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer (raw, json) Hash identifier: I7UEEzSzs4ieUbuGbp87mruw76yztcxyy/aPTYiSpCY= Subject key identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F6B638B965AA6D3C508B8AD8484F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210177 IP: 194.62.136.0/22 IP: 2a0d:8d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:6b:63:8b:96:5a:a6:d3:c5:08:b8:ad:84:84:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=329dbb46a4eb7645d994a0e4b984fcdac204a484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ec:46:b4:ce:88:c7:14:03:93:f1:fa:fb:2d: 06:c9:81:fe:af:22:59:3b:25:40:47:3b:3e:8d:a9: 7c:18:41:f3:86:71:71:46:27:14:ff:35:cc:68:2c: 90:78:4a:e1:f3:96:6e:2f:12:8f:e6:3b:7a:48:2c: 1a:86:5c:04:09:0c:ca:43:59:ae:f4:72:1d:bb:ab: f5:6e:2f:a3:92:6c:fc:2c:1c:c8:21:62:3b:4e:5c: e5:b1:a4:8b:08:14:5d:95:09:d3:30:59:dd:84:88: 0a:f8:f2:ac:fb:97:0a:a0:49:1e:41:04:f8:d6:c3: 3a:46:f4:e5:27:f5:40:e7:6d:47:af:51:3b:d7:dd: ff:57:10:0a:c0:bf:a2:28:f9:82:18:64:d0:2f:8c: 4b:46:b2:13:cc:9e:fb:df:ca:36:25:c9:a0:08:10: ed:64:f4:40:7c:00:14:d3:a3:39:67:a6:26:ab:d8: d3:65:40:e3:0d:31:c4:4b:2e:41:45:31:19:17:d2: 29:3c:33:55:f0:20:82:e7:00:fc:8e:a2:49:30:2d: f6:a3:0f:da:1d:22:84:d8:e2:d9:71:99:3d:eb:ba: 28:64:f7:ef:d8:05:19:05:e8:78:69:7a:da:b4:32: 5c:46:32:88:3f:3c:55:ba:84:57:4d:af:c0:40:2b: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.136.0/22 IPv6: 2a0d:8d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210177 Signature Algorithm: sha256WithRSAEncryption 88:4b:1c:05:d4:32:aa:d2:25:74:4c:37:83:ab:ec:57:0a:44: 55:aa:8f:25:a9:0b:f2:84:86:1d:22:da:6e:55:4b:70:a5:a2: 35:0e:18:34:42:8f:bb:fc:5a:20:11:eb:5c:a8:66:b6:ce:97: e9:d2:36:63:7a:f8:d5:a2:ce:13:6f:1d:5d:2d:7e:8c:f5:eb: 7f:b5:e7:6e:4a:55:c8:f3:44:29:2e:f4:65:35:20:55:52:67: e5:b3:cd:7f:c2:01:73:49:d3:a2:33:0b:af:64:98:71:cf:d8: c5:c4:ec:10:89:dc:4b:9c:22:b7:1f:39:dc:1e:69:6a:e4:fc: 1a:5d:0d:56:0f:fb:cd:4b:a6:bd:7c:65:e2:70:f4:76:c8:f4: 5d:a2:1b:58:22:b5:8f:eb:7b:18:ec:60:42:68:b7:af:91:9a: b2:34:77:c7:91:d9:0d:62:6c:11:0a:5c:16:f0:6f:7f:b4:99: ab:22:e8:84:6e:2d:4d:05:06:61:3c:2d:5d:9e:f5:de:3a:50: 4d:a6:23:25:09:c1:71:33:6c:30:1b:e1:fb:ec:81:84:c1:82: c2:f4:e5:b6:e9:0a:5e:0e:20:83:88:40:77:b9:fe:12:bb:28: 1c:98:c3:a0:f2:37:29:2b:9a:82:90:19:02:88:0a:8f:6d:2e: 77:6a:b3:bd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f2tji5ZaptPFCLithIT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjlkYmI0NmE0ZWI3NjQ1ZDk5NGEwZTRiOTg0ZmNkYWMyMDRhNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uxGtM6IxxQDk/H6+y0GyYH+ryJZ OyVARzs+jal8GEHzhnFxRicU/zXMaCyQeErh85ZuLxKP5jt6SCwahlwECQzKQ1mu 9HIdu6v1bi+jkmz8LBzIIWI7TlzlsaSLCBRdlQnTMFndhIgK+PKs+5cKoEkeQQT4 1sM6RvTlJ/VA521Hr1E7193/VxAKwL+iKPmCGGTQL4xLRrITzJ7738o2JcmgCBDt ZPRAfAAU06M5Z6Ymq9jTZUDjDTHESy5BRTEZF9IpPDNV8CCC5wD8jqJJMC32ow/a HSKE2OLZcZk967ooZPfv2AUZBeh4aXratDJcRjKIPzxVuoRXTa/AQCuRswIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDKdu0ak63ZF2ZSg5LmE/NrCBKSEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2YxNzFi ZS05NjUzLTQxZDgtYTM0NC1mZWMxNWFiODQxMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjE3MWJl LTk2NTMtNDFkOC1hMzQ0LWZlYzE1YWI4NDEzNS8xL01wMjdScVRyZGtYWmxLRGt1 WVQ4MnNJRXBJUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwj6IMA0EAgACMAcDBQMqDY1AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM1ATANBgkqhkiG9w0BAQsFAAOCAQEAiEscBdQyqtIl dEw3g6vsVwpEVaqPJakL8oSGHSLablVLcKWiNQ4YNEKPu/xaIBHrXKhmts6X6dI2 Y3r41aLOE28dXS1+jPXrf7XnbkpVyPNEKS70ZTUgVVJn5bPNf8IBc0nTojMLr2SY cc/YxcTsEIncS5witx853B5pauT8Gl0NVg/7zUumvXxl4nD0dsj0XaIbWCK1j+t7 GOxgQmi3r5GasjR3x5HZDWJsEQpcFvBvf7SZqyLohG4tTQUGYTwtXZ713jpQTaYj JQnBcTNsMBvh++yBhMGCwvTltukKXg4gg4hAd7n+ErsoHJjDoPI3KSuagpAZAogK j20ud2qzvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:26 2026 by rpki-client